CVE-2023-24203: XSS

Published May 14, 2024

Updated

Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameter(s).

Affected Software

2 affected components

Sourcecodester Simple Customer Relationship Management System

oretnom23 Simple Customer Relationship Management System=1.0

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

May 14, 2024

CVE Published

via NVD·05:15 PM

Nov 7, 2024

Data Sourced

via MITRE·03:09 PM

Description

Frequently Asked Questions

What is the severity of CVE-2023-24203?

CVE-2023-24203 has a medium severity rating due to its potential for Cross Site Scripting attacks.

How do I fix CVE-2023-24203?

To fix CVE-2023-24203, validate and sanitize user input for the company or query parameters in the application.

What are the potential impacts of CVE-2023-24203?

The potential impacts of CVE-2023-24203 include unauthorized execution of arbitrary code and manipulation of the web application's behavior.

Is my version of SourceCodester Simple Customer Relationship Management System vulnerable to CVE-2023-24203?

Yes, version 1.0 of the SourceCodester Simple Customer Relationship Management System is vulnerable to CVE-2023-24203.

Who is affected by CVE-2023-24203?

Any users of SourceCodester Simple Customer Relationship Management System version 1.0 are affected by CVE-2023-24203.